user don’t have JAMF make it more difficult for zero trust
use okta as the CA instead of JAMF if JAMF is not implemented
MFA location based?
OIE - network zone based policies
Okta Fastpass - marked in the token - doing another auth that the device is the same device
Why when Office 365 authenticates and asks to sign in it pulls the sAML account instead of the user’s email address?
could it be that either Okta is pulling from the wrong info or is it because of the licensing and the groups that AD is set to look for from the Sailpoint account when it is made?
There is policies and rules that can be made for each application and okta can also restrict access to applications if they aren’t running the correct OS